Privacy Policy

1. Who We Are

ctLibrary™ is published by CozziTech LLC ("CozziTech," "we," "us," or "our"). You can reach us at privacy@cozzitech.com for any privacy question or request, or at support@cozzitech.com for general support.

2. Data Stored on Your Device

All folders, categories, documents, notes, thumbnails, and any optional app-lock password hash live in private app storage on your device. We have no ability to read, copy, transmit, or recover this data.

At-rest protection of that storage is provided by your operating system — specifically, iOS Data Protection (active whenever your device has a passcode set) or Android file-based encryption (active whenever your device has a screen lock set). ctLibrary™ does not implement additional encryption on top of that.

3. Optional iCloud Sync (iOS only)

On iOS, you can turn on iCloud Sync at Settings → iCloud Sync. When enabled, a copy of your folders, categories, documents, notes, and document files is stored in your personal iCloud account under an app-private container so it can sync between Apple devices you are signed into with the same Apple ID. This feature is off by default and is never required to use ctLibrary™.

When iCloud Sync is on, the sync goes directly between your device and Apple. CozziTech operates no sync server, has no access to the synced data, and receives nothing about what is in your library. Apple's handling of data in your iCloud account is governed by Apple's privacy policy and is encrypted in transit and at rest by Apple.

You can turn iCloud Sync off at any time, and you can remove the synced copy from your iCloud account using Settings → iCloud Sync → "Remove from iCloud." That action deletes the ctLibrary data from your iCloud account; it does not affect data on your device.

4. Optional Google Drive Sync (Android only)

On Android, you can turn on Google Drive Sync at Settings → Google Drive Sync. The feature exists for one reason only: so you can sync your own ctLibrary™ data between your own Android devices using your own Google Drive account. CozziTech does not operate, own, or host any cloud storage for ctLibrary™ — the destination is always your personal Google Drive, and only your personal Google Drive.

When you turn the feature on, Android shows you Google's standard account-picker and consent screen. You choose which Google account to sign in with, and you grant ctLibrary™ permission to read and write only within an app-private area of your Google Drive (an app-scoped folder). ctLibrary™ never asks for, and is never granted, access to other files in your Google Drive.

While Google Drive Sync is on, a copy of your folders, categories, documents, notes, and document files is uploaded to that app-private area of your Google Drive so it can sync to your other Android devices signed into the same Google account. The sync goes directly between your device and Google. CozziTech operates no sync server, has no access to the synced data, sees nothing about the contents of your library, and never receives any of the files or notes that are synced. Google's handling of data in your Google Drive account is governed by Google's privacy policy and is encrypted in transit and at rest by Google.

This feature is off by default and is never required to use ctLibrary™. You can turn Google Drive Sync off at any time, and you can remove the synced copy from your Google Drive using Settings → Google Drive Sync → "Remove from Google Drive," or by revoking ctLibrary™'s access in your Google account at any time. Removing the synced copy from Google Drive does not affect data on your device.

5. Data We Receive

The only personal data we receive is your email address, and only when you choose to verify it. We use it to:

• Send you a one-time 6-digit verification code.
• Send you occasional informational email about CozziTech products, including new features, related apps, important service updates, and security notices.

After verification, the temporary record of the code is deleted from our verification service. Your verified email address is stored on your device in secure storage so the app knows you are verified. Verified email addresses may also be retained by CozziTech for the product-information purposes described above; you can opt out at any time by tapping "Forget my email" in Settings, or by emailing privacy@cozzitech.com.

6. Service Providers

CozziTech uses a small number of vendors solely to deliver the email-verification message that unlocks the full app. These vendors process your email address only to deliver the verification code and may retain transactional log data in accordance with their own privacy policies. They do not have access to the contents of your library.

If you turn on iCloud Sync or Google Drive Sync, Apple or Google (respectively) is acting as your cloud storage provider under your account — not as a CozziTech service provider. CozziTech has no business relationship with Apple or Google in connection with your synced data.

7. What We Do Not Collect

• No analytics, telemetry, or behavior tracking.
• No advertising identifiers and no advertising.
• No location data.
• No contacts, calendar, microphone, or camera data.
• No content of your documents or notes is ever transmitted to CozziTech or to any CozziTech service provider. (If you turn on iCloud Sync, your library content is transmitted between your device and Apple under your own iCloud account; if you turn on Google Drive Sync on Android, it is transmitted between your device and Google under your own Google account. See sections 3 and 4.)

8. Permissions

ctLibrary™ requests the following device permissions only when needed:

• Files — to let you import documents you select.
• Photo Library — only when you import an image you select.
• Face ID / Touch ID / biometrics — only if you turn on biometric unlock for App Lock.
• Google account (Android) — only if you turn on Google Drive Sync, and only with the app-scoped Drive permission needed to sync to your own Google Drive's app-private area.

9. Children

ctLibrary™ is not directed to children under 13 (or under 16 in the EU/UK). We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, contact us and we will delete it.

10. Your Rights and Choices

You can exercise the following rights at any time, directly from the app:

• Delete your library — Settings → "Reset & wipe everything" removes all local data.
• Forget your verified email — Settings → "Forget my email" removes the verified email from your device and asks our verification service to delete any pending record.
• Remove the synced copy from your cloud account — Settings → iCloud Sync → "Remove from iCloud" (iOS) or Settings → Google Drive Sync → "Remove from Google Drive" (Android). You can also revoke ctLibrary™'s access to your Google account at any time from your Google account settings.

For access, correction, deletion, or any other privacy request that cannot be completed in-app, contact us at privacy@cozzitech.com. Residents of California, the EU, the UK, and other jurisdictions with applicable privacy laws have rights to access, correct, delete, port, and limit processing of personal data we hold about them.

11. Data Retention

Verification codes are stored only as one-way cryptographic hashes with a short time-to-live (approximately ten minutes) and are deleted automatically — or immediately on successful use. Verified email addresses may be retained for the product-information purposes described in section 5; we honor "Forget my email" and email opt-out requests promptly.

12. Security

All network requests use HTTPS. Verification codes are hashed before storage. If you enable App Lock, your password is stored on your device only as a salted, slow-iteration cryptographic hash — your password itself is never stored or transmitted. At-rest protection of local data is provided by your operating system's built-in file encryption (iOS Data Protection or Android file-based encryption). If you enable iCloud Sync or Google Drive Sync, the synced copy in your own Apple or Google account is protected by that provider's encryption in transit and at rest. No method of electronic transmission or storage is 100% secure, and we cannot guarantee absolute security.

13. International Users

The verification service is operated from the United States. By using email verification you consent to your email being processed in the United States and other jurisdictions where our service providers operate. If you enable iCloud Sync or Google Drive Sync, your synced library is processed and stored in your own Apple or Google account according to that provider's international data-handling practices.

14. Changes to This Policy

We will update the "Last Updated" date at the top of this page when we change this policy. Material changes will be highlighted in-app on next launch. The current version is always available at cozzitech.com/ct-library-privacy/.

15. Contact Us